CVE-2026-74653

A flaw was found in the Linux kernel's 8250of serial driver, specifically affecting NXP LPC32xx UARTs. A local user could repeatedly open a specific serial port, triggering a stuck RX character-timeout interrupt. This leads to an interrupt storm that can livelock the CPU, resulting in a Denial of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fixed an issue where an interrupt storm occurred after receiving a corrupted ifid in the IRQ handler. Commit 31a7a0bbeb00 “dpaa2-switch”: added a range check for ifid in the IRQ handler introduces a mechanism to...

CVE-2026-74653

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

EUVD-2026-64590

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74653

CVE-2026-74653 affects the Linux kernel 8250_of serial driver on NXP LPC32xx (PORT_LPC3220) hardware. The UART can latch an RX character-timeout interrupt while the RX FIFO is empty; because the interrupt is level-triggered and re-fires immediately, it causes an interrupt storm that livelocks the...

Linux Distros Unpatched Vulnerability : CVE-2026-74653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is...

PT-2026-79658

In the Linux kernel, the following vulnerability has been resolved: serial: 8250 of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORT LPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UART IIR RX TIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-12629

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

CVE-2026-12629 PL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of service

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

EUVD-2026-60266

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

CVE-2026-12629

The Zephyr RTOS ARM PL011 UART driver's pl011_isr() only cleared CTS interrupts, never writing UARTICR for error bits. An attacker controlling a serial peer can inject line errors to trigger a permanent interrupt-storm livelock (availability DoS), CVSS 4.6 (MEDIUM). Fix commit: https://github.com...

CVE-2026-12629 PL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of service

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

CVE-2026-12629

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

PT-2026-76711

The ARM PL011 UART driver in drivers/serial/uart pl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011 IMSC ERROR MASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears t...

UBUNTU-CVE-2026-68395

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

CVE-2026-68395

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

CVE-2026-68395 ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...